Trojan

Trojan:MSIL/DscStealer.RPZ!MTB (file analysis)

Malware Removal

The Trojan:MSIL/DscStealer.RPZ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/DscStealer.RPZ!MTB virus can do?

  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan:MSIL/DscStealer.RPZ!MTB?



File Info:

name: 6C13F255AD197B339877.mlw
path: /opt/CAPEv2/storage/binaries/8680e7dfbbe2a7b74b7be4e71702dbecebd519d95c08a55bf3286ddb13ceff28
crc32: E4DA835D
md5: 6c13f255ad197b339877916978b2f1f4
sha1: 684e9b4d3aea5eae7a1cdc5a34836a9052d98dc9
sha256: 8680e7dfbbe2a7b74b7be4e71702dbecebd519d95c08a55bf3286ddb13ceff28
sha512: fdc93fccfcc0091d6f8af5953abbb2ce4eee24d2566290507ad216a0c5a2108e36ac38dd835a7f4dba853137bc5f0aa8a0a8ec6aec91a61149eb89f1ed96dfeb
ssdeep: 192:659iA3AhnkKgJCFi3FiPH7UEjkYcDaVKrgIe4Fpw8:65F3At8Wi1iPHguklawgIHpw
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T179F1D91AB3E84921E8FE477944B202012371B6926C13EB0C2CDC469A6C33B656FE3771
sha3_384: 8362c04c372f2b4c6c3a32c9de40f48f83e3201d855ad75c51d282cd672796f1382905dd45b27a98d7546fb16a2fde6c
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-02-10 00:40:19


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: supersex_c64641c6a0a8a6dd9bdbc77ab5cf02322242121048672b7c13da78df0a044fda.exe
LegalCopyright:  
OriginalFilename: supersex_c64641c6a0a8a6dd9bdbc77ab5cf02322242121048672b7c13da78df0a044fda.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/DscStealer.RPZ!MTB also known as:

BkavW32.AIDetectNet.01
LionicTrojan.Win32.Disco.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.6c13f255ad197b33
CAT-QuickHealTrojanpws.Disco
McAfeeArtemis!6C13F255AD19
ZillyaTrojan.Disco.Win32.9218
SangforSpyware.Win32.Disco.Vb8x
K7AntiVirusSpyware ( 0059ef501 )
AlibabaTrojanPSW:Win32/Disco.4658e154
K7GWSpyware ( 0059ef501 )
VirITTrojan.Win32.SpyLoad.LM
CyrenW32/MSIL_Kryptik.IYK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.EIV
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.Win32.Disco.gen
BitDefenderIL:Trojan.MSILZilla.25316
NANO-AntivirusTrojan.Win32.Disco.juwvpy
MicroWorld-eScanIL:Trojan.MSILZilla.25316
AvastWin32:SpywareX-gen [Trj]
TencentTrojan-Psw.Win32.Disco.kb
TACHYONTrojan-PWS/W32.DN-Disco.8192.B
SophosTroj/Disteal-AB
F-SecureTrojan.TR/Spy.Agent.gwmwz
DrWebBackDoor.SpyBotNET.56
VIPREIL:Trojan.MSILZilla.25316
TrendMicroTROJ_GEN.R002C0PBD23
McAfee-GW-EditionBehavesLike.Win32.Generic.xt
EmsisoftIL:Trojan.MSILZilla.25316 (B)
GDataIL:Trojan.MSILZilla.25316
AviraTR/Spy.Agent.gwmwz
Antiy-AVLTrojan/Win32.Wacatac
ArcabitIL:Trojan.MSILZilla.D62E4
MicrosoftTrojan:MSIL/DscStealer.RPZ!MTB
GoogleDetected
AhnLab-V3Trojan/Win.MSILZilla.R559134
ALYacIL:Trojan.MSILZilla.25316
MAXmalware (ai score=85)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.DiscordStealer.MSIL
TrendMicro-HouseCallTROJ_GEN.R002C0PBD23
RisingSpyware.Agent!8.C6 (CLOUD)
IkarusTrojan.MSIL.Spy
MaxSecureTrojan.Malware.121218.susgen
FortinetMSIL/SxDisco.A!tr
AVGWin32:SpywareX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:MSIL/DscStealer.RPZ!MTB?

Trojan:MSIL/DscStealer.RPZ!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment